Unauthorized Access Vulnerability in SenseLive X3050 Web Management Interface
CVE-2026-40630

9.3CRITICAL

Key Information:

Vendor

Senselive

Status
X3050
Vendor
CVE Published:
23 April 2026

What is CVE-2026-40630?

A vulnerability in the SenseLive X3050 web management interface permits unauthorized access to critical configuration endpoints due to inadequate access control measures. Attackers with network access might exploit this flaw, bypassing the standard authentication mechanisms and gaining the ability to directly manipulate sensitive configuration settings, potentially compromising device integrity and security.

Affected Version(s)

X3050 V1.523

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-1...
https://github.com/cisagov/CSAF/blob/develop/csaf_files/O...
https://senselive.io/contact

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Jithin Nambiar J reported these vulnerabilities to CISA.
.